Commit 18469fba authored by psaromanola1's avatar psaromanola1
Browse files

Add secrets to the release namespace

parent c1a6f090

chart/ocm-scheduler-chart/templates/cleanup-job.yaml

+10 −10
Changes for chart/ocm-scheduler-chart/templates/cleanup-job.yaml: 10 added lines, 10 removed lines.
Original line number Diff line number Diff line 
apiVersion: v1

kind: ServiceAccount

metadata:

  name: {{ .Values.namespace.name }}-cleanup

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-cleanup

  namespace: {{ .Release.Namespace | quote }}

  annotations:

    "helm.sh/hook": pre-delete

    "helm.sh/hook-weight": "-10"
@@ -11,7 +11,7 @@ metadata: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: {{ .Values.namespace.name }}-cleanup

  name: {{ .Release.Name }}-cleanup

  annotations:

    "helm.sh/hook": pre-delete

    "helm.sh/hook-weight": "-10"
@@ -43,7 +43,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

  name: {{ .Values.namespace.name }}-cleanup

  name: {{ .Release.Name }}-cleanup

  annotations:

    "helm.sh/hook": pre-delete

    "helm.sh/hook-weight": "-10"
@@ -51,17 +51,17 @@ metadata: 
roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: {{ .Values.namespace.name }}-cleanup

  name: {{ .Release.Name }}-cleanup

subjects:

  - kind: ServiceAccount

    name: {{ .Values.namespace.name }}-cleanup

    namespace: {{ .Values.namespace.name }}

    name: {{ .Release.Name }}-cleanup

    namespace: {{ .Release.Namespace | quote }}

---

apiVersion: batch/v1

kind: Job

metadata:

  name: {{ .Values.namespace.name }}-cleanup

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-cleanup

  namespace: {{ .Release.Namespace | quote }}

  annotations:

    "helm.sh/hook": pre-delete

    "helm.sh/hook-weight": "0"
@@ -70,7 +70,7 @@ spec: 
  backoffLimit: 2

  template:

    spec:

      serviceAccountName: {{ .Values.namespace.name }}-cleanup

      serviceAccountName: {{ .Release.Name }}-cleanup

      restartPolicy: Never

      containers:

        - name: kubectl

chart/ocm-scheduler-chart/templates/managed-clusters-job.yaml

+10 −10
Changes for chart/ocm-scheduler-chart/templates/managed-clusters-job.yaml: 10 added lines, 10 removed lines.
Original line number Diff line number Diff line
@@ -2,13 +2,13 @@ 
apiVersion: v1

kind: ServiceAccount

metadata:

  name: hypo-scheduler-setup

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-setup

  namespace: {{ .Release.Namespace | quote }}

---

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: {{ .Values.namespace.name }}-managedcluster-setup

  name: {{ .Release.Name }}-managedcluster-setup

rules:

  - apiGroups: ["cluster.open-cluster-management.io"]

    resources: ["managedclusters"]
@@ -22,21 +22,21 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

  name: {{ .Values.namespace.name }}-managedcluster-setup

  name: {{ .Release.Name }}-managedcluster-setup

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: {{ .Values.namespace.name }}-managedcluster-setup

  name: {{ .Release.Name }}-managedcluster-setup

subjects:

  - kind: ServiceAccount

    name: hypo-scheduler-setup

    namespace: {{ .Values.namespace.name }}

    name: {{ .Release.Name }}-setup

    namespace: {{ .Release.Namespace | quote }}

---

apiVersion: batch/v1

kind: Job

metadata:

  name: {{ .Values.namespace.name }}-configure-clusters

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-configure-clusters

  namespace: {{ .Release.Namespace | quote }}

  annotations:

    helm.sh/hook: post-install,post-upgrade

    helm.sh/hook-weight: "5"
@@ -46,7 +46,7 @@ spec: 
  template:

    spec:

      restartPolicy: Never

      serviceAccountName: hypo-scheduler-setup

      serviceAccountName: {{ .Release.Name }}-setup

      containers:

        - name: kubectl

          image: alpine/k8s:1.31.1

chart/ocm-scheduler-chart/templates/namespace.yaml

+0 −2
Changes for chart/ocm-scheduler-chart/templates/namespace.yaml: 0 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -3,6 +3,4 @@ apiVersion: v1 
kind: Namespace

metadata:

  name: {{ .Values.namespace.name | quote }}

  annotations:

    "helm.sh/resource-policy": keep

{{- end }}

chart/ocm-scheduler-chart/templates/scheduler.yaml

+31 −27
Changes for chart/ocm-scheduler-chart/templates/scheduler.yaml: 31 added lines, 27 removed lines.
Original line number Diff line number Diff line 
apiVersion: v1

kind: ServiceAccount

metadata:

  name: hypo-scheduler-controller-manager

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager

  namespace: {{ .Values.namespace.name | quote }}

---

apiVersion: rbac.authorization.k8s.io/v1

kind: Role

metadata:

  name: hypo-scheduler-leader-election-role

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-leader-election-role

  namespace: {{ .Values.namespace.name | quote }}

rules:

- apiGroups:

  - ''
@@ -45,7 +45,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: hypo-scheduler-hyposchedulingmanifest-editor-role

  name: {{ .Release.Name }}-hyposchedulingmanifest-editor-role

rules:

- apiGroups:

  - scheduling.hypo.eu
@@ -69,7 +69,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: hypo-scheduler-hyposchedulingmanifest-viewer-role

  name: {{ .Release.Name }}-hyposchedulingmanifest-viewer-role

rules:

- apiGroups:

  - scheduling.hypo.eu
@@ -89,7 +89,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: hypo-scheduler-manager-role

  name: {{ .Release.Name }}-manager-role

rules:

- apiGroups:

  - ac3.redhat.com
@@ -176,7 +176,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: hypo-scheduler-metrics-auth-role

  name: {{ .Release.Name }}-metrics-auth-role

rules:

- apiGroups:

  - authentication.k8s.io
@@ -194,7 +194,7 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

  name: hypo-scheduler-metrics-reader

  name: {{ .Release.Name }}-metrics-reader

rules:

- nonResourceURLs:

  - /metrics
@@ -204,48 +204,48 @@ rules: 
apiVersion: rbac.authorization.k8s.io/v1

kind: RoleBinding

metadata:

  name: hypo-scheduler-leader-election-rolebinding

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-leader-election-rolebinding

  namespace: {{ .Values.namespace.name | quote }}

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: Role

  name: hypo-scheduler-leader-election-role

  name: {{ .Release.Name }}-leader-election-role

subjects:

- kind: ServiceAccount

  name: hypo-scheduler-controller-manager

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager

  namespace: {{ .Values.namespace.name | quote }}

---

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

  name: hypo-scheduler-manager-rolebinding

  name: {{ .Release.Name }}-manager-rolebinding

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: hypo-scheduler-manager-role

  name: {{ .Release.Name }}-manager-role

subjects:

- kind: ServiceAccount

  name: hypo-scheduler-controller-manager

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager

  namespace: {{ .Values.namespace.name | quote }}

---

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

  name: hypo-scheduler-metrics-auth-rolebinding

  name: {{ .Release.Name }}-metrics-auth-rolebinding

roleRef:

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  name: hypo-scheduler-metrics-auth-role

  name: {{ .Release.Name }}-metrics-auth-role

subjects:

- kind: ServiceAccount

  name: hypo-scheduler-controller-manager

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager

  namespace: {{ .Values.namespace.name | quote }}

---

apiVersion: v1

kind: Service

metadata:

  name: hypo-scheduler-controller-manager-metrics-service

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager-metrics-service

  namespace: {{ .Values.namespace.name | quote }}

spec:

  ports:

  - name: https
@@ -254,23 +254,26 @@ spec: 
    targetPort: 8443

  selector:

    control-plane: controller-manager

    app.kubernetes.io/instance: {{ .Release.Name | quote }}

---

apiVersion: apps/v1

kind: Deployment

metadata:

  name: hypo-scheduler-controller-manager

  namespace: {{ .Values.namespace.name }}

  name: {{ .Release.Name }}-controller-manager

  namespace: {{ .Values.namespace.name | quote }}

spec:

  replicas: {{ .Values.scheduler.replicaCount }}

  selector:

    matchLabels:

      control-plane: controller-manager

      app.kubernetes.io/instance: {{ .Release.Name | quote }}

  template:

    metadata:

      annotations:

        kubectl.kubernetes.io/default-container: manager

      labels:

        control-plane: controller-manager

        app.kubernetes.io/instance: {{ .Release.Name | quote }}

    spec:

      containers:

      - args:
@@ -317,7 +320,7 @@ spec: 
      {{- end }}

      securityContext:

        runAsNonRoot: true

      serviceAccountName: hypo-scheduler-controller-manager

      serviceAccountName: {{ .Release.Name }}-controller-manager

      terminationGracePeriodSeconds: 10

---

{{- if .Values.clusterSet.enabled }}
@@ -325,6 +328,7 @@ apiVersion: cluster.open-cluster-management.io/v1beta2 
kind: ManagedClusterSet

metadata:

  name: {{ .Values.clusterSet.name | quote }}



---

apiVersion: cluster.open-cluster-management.io/v1beta2

kind: ManagedClusterSetBinding

chart/ocm-scheduler-chart/values.yaml

+2 −2
Changes for chart/ocm-scheduler-chart/values.yaml: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line 
namespace:

  create: true

  name: hypo-scheduler-system

  create: false

  name: hypo-test

scheduler:

  replicaCount: 1

  image: